This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WNhdQQJWYEzcWvNDgqP_RJcsd3s.roa File: WNhdQQJWYEzcWvNDgqP_RJcsd3s.roa (raw, json) Hash identifier: gpXhGCOQ1TiNZ7ZTuoDVntl1sPowPwlwIeM8U0Z27Vo= Subject key identifier: 58:D8:5D:41:02:56:60:4C:DC:5A:F3:43:82:A3:FF:44:97:2C:77:7B Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F8553F68FF8B41F363C6472ACECD480 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WNhdQQJWYEzcWvNDgqP_RJcsd3s.roa Signing time: Fri 02 Jan 2026 16:23:22 +0000 ROA not before: Fri 02 Jan 2026 16:23:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51659 IP address blocks: 194.87.68.0/22 maxlen: 22 194.87.68.0/23 maxlen: 23 194.87.70.0/24 maxlen: 24 194.87.196.0/23 maxlen: 23 195.58.48.0/23 maxlen: 23 195.133.5.0/24 maxlen: 24 195.133.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:53:f6:8f:f8:b4:1f:36:3c:64:72:ac:ec:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58d85d410256604cdc5af34382a3ff44972c777b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:88:a8:2e:59:f4:9e:cf:56:05:f0:64:72: a9:3a:94:a5:1e:bb:68:0b:11:1f:29:f0:8b:df:0c: a9:c8:7b:fe:55:43:0a:22:0b:f1:88:6e:63:fb:95: 47:cd:83:52:8a:b5:c5:a0:17:73:fe:49:82:f7:da: d6:dd:59:e0:43:25:65:d2:58:ed:19:9f:c6:5e:3e: 47:ff:71:49:74:a3:94:df:ed:c4:45:c1:f7:5c:ad: a9:f9:1f:34:31:7b:0a:db:1c:0f:ca:f4:8f:35:9c: 7f:50:6a:ae:a9:a7:e7:77:40:a7:b1:3e:9b:ca:2e: b2:5a:7d:03:58:b2:2c:b0:56:72:61:75:e0:b1:72: 77:66:4b:07:63:df:5d:6b:4f:4a:40:b1:e5:18:f6: 12:aa:52:7c:e5:6a:7e:f1:f6:7f:0f:10:ee:e6:c8: 6e:2d:4a:d5:40:b2:e2:5f:44:76:dd:bb:97:64:5e: 4d:23:a1:3c:33:9f:77:dc:5f:cb:2d:0d:0b:ce:85: cf:67:75:dd:2f:56:9f:24:2b:ec:ad:97:2e:5f:34: b5:6b:31:97:a9:c3:c4:91:7b:53:62:db:64:bf:45: c9:0d:c6:96:35:3f:93:2e:50:2f:f9:c1:c1:ab:ee: a6:43:c1:c1:fc:68:6a:63:38:bc:1d:e4:c5:1b:30: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D8:5D:41:02:56:60:4C:DC:5A:F3:43:82:A3:FF:44:97:2C:77:7B X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WNhdQQJWYEzcWvNDgqP_RJcsd3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.68.0/22 194.87.196.0/23 195.58.48.0/23 195.133.5.0/24 195.133.23.0/24 Signature Algorithm: sha256WithRSAEncryption 11:e9:4d:9f:53:59:db:78:b0:0b:eb:fb:ac:a2:6c:f5:25:a3: 68:3f:3b:a0:7b:f6:65:48:4e:3f:b2:db:40:09:67:ce:11:ee: 28:db:a4:c3:88:bd:0b:8e:01:2e:20:2b:79:29:c5:40:2b:3b: 8a:1b:56:ee:1c:63:8a:ee:d4:62:2d:5e:ee:d1:78:64:ae:87: 32:53:e9:b9:27:67:e1:72:7b:86:f6:53:f3:51:8f:e3:4d:23: 10:32:b7:16:20:5f:91:64:e6:92:dc:d3:4b:39:4c:7c:03:83: da:c8:af:f1:ed:d7:9e:7c:fd:7e:09:05:a4:86:6b:f8:3e:bb: 86:8d:6d:28:c9:91:ac:cb:91:cc:fb:cd:d3:50:35:5e:3a:51: 17:d6:22:83:cb:52:be:64:7c:0d:2b:2b:9e:ef:51:36:ed:b1: c6:cf:62:ff:95:5d:78:75:05:e9:f7:4e:e6:d8:40:23:c1:62: e3:83:ae:f0:40:cf:56:e4:cb:a6:ba:81:d8:04:0a:a1:8b:78: 8a:47:9b:ae:42:60:99:0b:1f:53:83:b1:7c:16:75:a3:62:88: 6d:35:23:15:92:3e:a1:49:aa:1d:4a:76:8c:8b:fe:67:40:f8: c5:cf:5f:7b:69:21:b3:e8:8e:d5:0d:b5:34:e6:e7:1b:ed:ff: dc:ec:3b:03 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hVP2j/i0HzY8ZHKs7NSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGQ4NWQ0MTAyNTY2MDRjZGM1YWYzNDM4MmEzZmY0NDk3MmM3NzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN+IqC5Z9J7PVgXwZHKpOpSlHrto CxEfKfCL3wypyHv+VUMKIgvxiG5j+5VHzYNSirXFoBdz/kmC99rW3VngQyVl0ljt GZ/GXj5H/3FJdKOU3+3ERcH3XK2p+R80MXsK2xwPyvSPNZx/UGquqafnd0CnsT6b yi6yWn0DWLIssFZyYXXgsXJ3ZksHY99da09KQLHlGPYSqlJ85Wp+8fZ/DxDu5shu LUrVQLLiX0R23buXZF5NI6E8M5933F/LLQ0LzoXPZ3XdL1afJCvsrZcuXzS1azGX qcPEkXtTYttkv0XJDcaWNT+TLlAv+cHBq+6mQ8HB/GhqYzi8HeTFGzDf0QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFjYXUECVmBM3FrzQ4Kj/0SXLHd7MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvV05oZFFRSldZRXpjV3ZORGdxUF9SSmNzZDNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCwldEAwQB wlfEAwQBwzowAwQAw4UFAwQAw4UXMA0GCSqGSIb3DQEBCwUAA4IBAQAR6U2fU1nb eLAL6/usomz1JaNoPzuge/ZlSE4/sttACWfOEe4o26TDiL0LjgEuICt5KcVAKzuK G1buHGOK7tRiLV7u0XhkrocyU+m5J2fhcnuG9lPzUY/jTSMQMrcWIF+RZOaS3NNL OUx8A4PayK/x7deefP1+CQWkhmv4PruGjW0oyZGsy5HM+83TUDVeOlEX1iKDy1K+ ZHwNKyue71E27bHGz2L/lV14dQXp907m2EAjwWLjg67wQM9W5MumuoHYBAqhi3iK R5uuQmCZCx9Tg7F8FnWjYohtNSMVkj6hSaodSnaMi/5nQPjFz197aSGz6I7VDbU0 5ucb7f/c7DsD -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:08 2026 by rpki-client